What is SSO?
With Single Sign-On (SSO), your users can log in to the online academy using an external account. Read more about SSO in general here.
In this article, we explain what needs to be configured to activate this integration with Okta.
To use SSO, users must already be added to the online academy. SSO does not create user accounts.
Read more here about adding users to your online academy.
How do I configure SSO?
We will provide instructions on how to set up SSO. Please consult Okta’s support for the precise settings.
Step-by-step guide for creating credentials in Okta
To set up SSO via Okta, you can follow the steps below. This Okta support article can also assist you in the process.
Obtain our Metadata URL using the following link: http://saml2.rakoo.com/saml/metadata
In our metadata, you will find our entityID. This needs to be entered at the Audience URL in the Okta SAML integration.
Configure the attributes to match Rakoo:
firstname = user.firstname
lastname = user.lastname
email = user.email
Next, you will need the credentials from Okta to configure the integration into your online academy. You can find this metadata at the 'sign on' tab at the SAML integration in Okta.
Identity Provider Single sign-on URL
It may look like this (example): https://klantnaam.okta-emea.com/app/iyk5twfdkaYFwYiP29b7/sso/saml/metadata
Audience URL
It may look like this (example): http://www.okta.com/iyk5twfdkaYFwYiP29b7
Optional: Certificate that we can add to the connection
X.509 Certificate
Step-by-step guide for creating the integration in the online academy
Go to “Integrations” via the menu on the left.
Under “Single Sign-On,” choose “Okta (SAML).”
Click “Add.”
Enter the information obtained from Okta.
If desired, enable the toggles under “Integration status”:
Use “Activated” to specify whether the integration is active.
With “Login with button,” you can choose whether a button should be displayed on the login screen. If this option is disabled, users can only log in via an external SSO method (e.g. intranet).
Save the changes to activate the integration.
Are you having trouble with the setup? Please contact support.